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CLAIMS 

We claim 



1 1 . An apparatus for secure distribution of content comprising: 

2 (a) a source for accessing content data; 

3 (b) a conditional access module for receiving the content data from said 

4 source and selectively processing the content data and selectively 

5 authorizing access to decoded processed content data; 

6 (c) a receiver for receiving the processed content data from said 

7 conditional access module and decoding the processed content data 

8 into said decoded processed content data; and 

I 9 (d) an output device for receiving the decoded processed content data 

10 from said receiver and outputting the decoded processed content 

1 1 data when authorized by said conditional access module. 

1 2. The apparatus according to claim 1 wherein said source comprises an 

2 optical disc reader. 

1 3. The apparatus according to claim 2 wherein said optical disc reader is a 

2 DVD optical disc reader. 

1 4. The apparatus according to claim 1 , wherein the apparatus is used with a 

2 backend system and wherein said source further comprises: 

3 (a) a source modem for communicating with said receiver and said 

4 backend; and 
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5 (b) a modem switch for switching between any two devices within the 

6 group consisting of said receiver, said source modem, and said 

7 backend. 

1 5. The apparatus according to claim 1 , wherein the apparatus is used with a 

2 backend system and wherein said receiver further comprises a receiver 

3 modem for communicating with said conditional access module, said 

4 source, and said backend. 

1 6. The apparatus according to claim 1 , wherein said content data is encrypted 

2 and said conditional access module further comprises a content decrypter 

3 to decrypt said encrypted content data into the processed content. 

1 7. The apparatus according to claim 6, wherein said source further comprises 

2 a super encryption device for super encrypting the encrypted content data 

3 and wherein said conditional access module further comprises a super 

4 decryption device for super decrypting the super encrypted content data. 

1 8. The apparatus according to claim 1 , wherein said conditional access 

2 module further comprises an interface encryption device for encrypting the 

3 processed content data and wherein said receiver further comprises an 

4 interface decryption device for decrypting the interface encrypted processed 

5 content data. 
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1 9. The apparatus according to claim 1 , wherein said conditional access 

2 module is renewable. 

1 10. The apparatus according to claim 1 , wherein said conditional access 

2 module further includes a CAM fingerprint logic device for adding a CAM 

3 watermark to said content data. 

1 11. The apparatus according to claim 10, wherein said CAM watermark 

2 includes at least one of the following: 

3 (a) a time of access of said content data; 

4 (b) a serial number of said content data; 

5 (c) a source identification value; 

6 (d) a receiver identification value; and 

7 (e) a conditional access module identification value. 

1 12. The apparatus according to claim 1 , further comprising a copy protection 

2 and playback control device for: 

3 (a) receiving extracted watermark data from said output device; 

4 (b) determining whether said extracted watermark data authorizes 

5 output of said decoded processed content data; and 

6 (c) if so, outputting an authorization to the output device. 
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The apparatus according to claim 1 , wherein said output device further 
includes a display device and a watermark logic device, wherein said 
watermark logic device is operable to: 

(a) extract a watermark from said decoded processed content data; 

(b) create an extracted watermark data packet from said watermark; 

(c) output said extracted watermark data packet to said conditional 
access module; 

(d) input an authorization from said conditional access module; and 

(e) output an enable signal to said display device. 

The apparatus according to claim 1 , wherein said output device further 
includes: 

(a) a video logic device for converting said decoded processed content 
data into a content signal; and 

(b) a display device for converting said content signal into a visual 
and/or audible form. 

The apparatus according to claim 14, wherein said output device further 
includes an output fingerprint logic device for adding an output watermark to 
said content signal. 

The apparatus according to claim 15, wherein said output watermark 

includes at least one of the following: 

(a) a time of access of said content data; 
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4 (b) a serial number of said content data; 

5 (c) a source identification value; 

6 (d) a receiver identification value; 

7 (e) a conditional access module identification value; and 

8 (f) a monitor identification value. 

1 1 7. The apparatus according to claim 4, wherein said backend further includes 

2 a certifying and registering means for certifying and registering with the 

3 backend at least one device of the group consisting of: said source, said 

4 receiver, said conditional access module, and said output device. 

1 18. An apparatus for secure distribution of content comprising: 

2 (a) a source for accessing content data, said source including a 

3 transport packet generation device for transforming the content data 

4 into content data packets; 

5 (b) a conditional access module for receiving the content data packets 

6 from said source and selectively processing the content data 

7 packets; 

8 (c) a receiver for receiving the processed content data packets from said 

9 conditional access module and decoding the processed content data 

10 packets; and 

11 (d) an output device for outputting the decoded content data, 

12 wherein communications between the source, the receiver and the 

13 conditional access module utilize at least one packet data protocol. 
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A method of preventing unauthorized access to content data in a system 
comprising a source, a conditional access module, a receiver and an output 
device, the method comprising: 

(a) acquiring content data at said source; 

(b) transporting said content data to said conditional access module; 

(c) determining whether access to said content data is authorized; 

(d) selectively processing the content data; 

(e) transporting processed content data from the conditional access 
module to said receiver; 

(f) decoding the processed content data; 

(g) selectively providing said decoded processed content data to said 
output device; and 

(h) outputting the decoded processed content data when authorized by 
said conditional access module. 



The method according to claim 19, wherein the system is used with a 
backend, said method further comprising the step of registering and 
certifying with the backend at least one device of the group consisting of: 
said source, said receiver, said conditional access module, and said output 
device. 
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1 21 . The method according to claim 1 9, wherein said source further comprises a 

2 transport packet generating device and said step of transporting said 

3 content data to said conditional access module further comprises the step 

4 of transforming the content data into content data packets using said 

5 transport packet generating device. 

1 22. The method according to claim 21 , wherein said receiver further comprises 

2 a transport packet demultiplexer and said step of transporting said content 

3 data to said conditional access module further comprises the step of 

4 unpacking said content data packets. 

1 23. The method according to claim 19, the method further comprising the step 

2 of adding a CAM watermark to said content data, said CAM watermark 

3 including at least one of the following: 

4 (a) a time of access of said content data; 

5 (b) a serial number of said content data; 

6 (c) a source identification value; 

7 (d) a receiver identification value; and 

8 (e) a conditional access module identification. value. 

1 24. The method according to claim 19, wherein said system further comprises a 

2 copy protection and playback control device and wherein said step of 

3 determining whether access to said content data is authorized further 

4 comprises the steps of: 
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5 (a) transporting extracted watermark data from said output device to 

6 said copy protection and playback control device; 

7 (b) determining whether said extracted watermark data authorizes said 

8 decoded processed content data for output; and 

9 (c) if so, outputting an authorization to the output device. 

1 25. The method according to claim 19, wherein said output device further 

2 includes a display device and a watermark logic device and said step of 

3 outputting the decoded processed content data when authorized by said 

4 conditional access module further comprises the steps of: 

5 (a) extracting a watermark from said decoded processed content data; 

6 (b) determining whether said watermark is different from a 

7 predetermined watermark or if a predetermined amount of time has 

8 expired; 

9 (c) if the watermark is determined to be different or said predetermined 

10 amount of time has expired: 

11 (i) outputting said extracted watermark data to said conditional 

12 access module; 

13 (ii) receiving an authorization from said conditional access 

14 module; and 

15 (iii) outputting an enable signal to said display device if 

16 authorized. 
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The method according to claim 19, wherein said step of outputting the 
decoded processed content data further includes: 

(a) converting said decoded processed content data into a content 
signal; and 

(b) converting said content signal into a visual and/or audible form. 

The method according to claim 26, the method further comprising the step 
of adding an output watermark to said content signal, said output watermark 
including at least one of the following: 

(a) a time of access of said content data; 

(b) a serial number of said content data; 

(c) a source identification value; 

(d) a receiver identification value; 

(e) a conditional access module identification value; and 

(f) a monitor device identification value. 

The method according to claim 19, wherein said content data is encrypted 
and said step of selectively processing the content data further comprises 
the step of decrypting said encrypted content data. 

The method according to claim 19, wherein said step of said transporting 
said content data to said conditional access module further comprises the 
steps of: 

(i) super encrypting said content data; 
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5 (ii) transporting said content data to said conditional access 

6 module; and 

7 (iii) super decrypting the super encrypted content data. 

1 30. The method according to claim 19, wherein said step of said transporting 

2 processed content data from the conditional access module to said receiver 

3 further comprises the steps of: 

4 (i) encrypting said processed content data; 

5 (ii) transporting encrypted processed content data to said 

6 receiver; and 

7 (iii) decrypting the decrypted processed content data. 

1 31 . A method of preventing unauthorized access to content data in a system 

2 comprising a source, a conditional access module, a receiver and an output 

3 device, the method comprising: 

4 a) acquiring content data at said source; 

5 b) transforming said content data into packet data; 

6 c) transporting said packet data from said source to said conditional 

7 access module; 

8 d) determining whether access to said packet data is authorized; 

9 e) selectively process said packet data; 

10 f) transporting said processed packet data to said receiver; 
n g) decoding said processed packet data; and 

12 h) outputting the decoded content. 



1999-23 



Q 



45 

13 wherein communications between the source, the receiver and the 

14 conditional access module utilize at least one packet data protocol. 



